The GDPR and DPA 2018 gives individuals the right to know what information is held
about them. It provides a framework to ensure that personal information is handled
properly.

The Act works in two ways. Firstly, it states that anyone who processes personal
information must comply with six principles (Article 5 of the GDPR), which make sure
that personal information is:

a.) processed lawfully, fairly and in a transparent manner
b.) collected and processed for specified, explicit and legitimate purposes and not
further processed in a manner that is incompatible with those original purposes
c.) Adequate, relevant, and limited to what is necessary for the purpose
d.) Accurate and kept up to date
e.) Not kept for longer than is necessary and subject to appropriate technical and
organisational measures to safeguard the rights and freedoms of individuals
f.) processed in a manner that ensures appropriate security of personal data,
including protection against unauthorised or unlawful processing; and

Article 5(2) adds that ‘the controller shall be responsible for, and be able to
demonstrate compliance with Article 5(1)(‘accountability’) and
Secondly, it provides individuals with important rights (Articles 13 and 14):
1.) Right to be informed
2.) Right of access
3.) Right to rectification
4.) Right to erasure (right to be forgotten)
5.) Right to restrict processing
6.) Right to data portability
7.) Right to object
8.) Rights related to automated decision making including profiling

Subject Access Request

Please enable JavaScript in your browser to complete this form.

Name *

First

Last

Email *

Address *

Data Being Requested *

Please specify what data you are requesting

Submit